Is CVE-2026-116187 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116187?

CVE-2026-116187 has a CVSS v3 severity of MEDIUM (5).

Back

CVE-2026-116187

Description

Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other tenants' multipart uploads by referencing their upload IDs. Attackers who learn a victim's bucket, object, and upload ID can inject parts, complete, or abort in-flight uploads and view upload and object metadata across tenants.